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Summary  of  SEI  Accomplishments:  1Q90 

The  Software  Capability  Evaluation  (SCE)  Project  presented  an  introductory 
course  on  using  the  SCE  method  in  selecting  contractors  to  the  Space  and  Naval  Warfare 
System  Command  (SPAWAR),  who  will  sponsor  the  pilot  use  of  the  SCE  method  in  its 
acquisitions. 

The  Capability  Maturity  Model  Workshop  was  held  in  March  at  the  SEI.  Sixty-two 
ptople  from  40  government  and  industry  organizations  attended. 


This  section  provides 
a  summary  of 
accomplishments  from 
January-March  1990 


The  Software  Metrics  Definition  Working  Group  and  the  Software  Metrics  Ac¬ 
quisition  Working  Group  met  separately  in  January.  Both  groups  are  developing 
documents  that  specify  measures  of  (n’oducts,  processes,  and  project  characteristics  that 
can  be  widely  and  consistently  used. 

The  Software  Engineering  Process  Definition  Project  completed  initial  planning. 
This  project  supports  process  improvement  through  the  maturation  of  the  methods  and 
technology  associated  with  software  engineering  process  definition. 

Members  of  the  Software  Process  Modeling  Project  delivered  a  model  of  the  F-16 
software  change  process  to  Ogden  Air  Logistics  Center. 

The  Domain  Analysis  Project  entered  a  feasibility  study  phase.  Project  members  are 
developing  and  testing  methods  for  performing  domain  analysis  to  support  software  reuse. 

Members  of  the  Real-Time  Embedded  Systems  Testbed  Project  completed  the  first  ver¬ 
sion  of  the  Hartstona  benchmark,  a  set  of  timing  requirements  for  testing  a  system’s 
ability  to  handle  real-time  applications. 

The  SEI  established  working  relationships  with  four  organizations  to  build  prototyping 
and  modeling  tools  for  real-time  systems  using  the  Durra  software,  which  describes 
distributed  ai^lications  running  on  heterogeneous  machines. 

Two  new  courses  were  offered  by  Carnegie  Mellon  as  part  of  its  new  Master  of  Soft¬ 
ware  Engineering  program,  a  joint  effort  between  the  SEI  and  the  CMU  School  of 
Computer  Science. 

The  seventh  Educator  Development  Workshop  was  held  in  January.  The  85  partici¬ 
pants  addressed  educational  issues  and  received  SEI  curriculum  modules  and  other  mate¬ 
rials. 

The  Academic  Series  of  the  Video  Dissemination  Project  began  its  sixth  semester  of 
production  by  videotaping  two  courses;  Software  Creation  and  Maintenance,  and  Soft¬ 
ware  Veriflcation  and  Validation. 

The  Distributed  Ada  Real-Time  Kernel  (DARK)  Project  concluded  development 
and  established  baseline  version  3.0  of  the  Kernel  software  and  documentation  for 
MC68020  and  VAX/VMS. 

Sixteen  new  Industry  affiliates,  one  new  academic  affiliate,  and  thirteen  new  resi¬ 
dent  affiliates  joined  the  SEI  this  quarter. 

The  Computer  Emergency  Response  Team  Coordination  Center  (CERT/CC) 

established  an  online  r^sitory  of  computer  security  information. 
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Software  Engineering  Process 


The  Software  Engineering  Process  Program  focuses  on  improving  the  process  of  soft¬ 
ware  development  Projects  within  the  program  are  assessing  the  actual  practice  of  soft¬ 
ware  engineering  in  the  defense  community,  training  organizations  to  gain  management 
control  over  their  software  development  processes,  supporting  the  use  of  quantitative 
methods  and  measures  as  a  basis  for  process  improvement,  and  developing  improved 
methods  for  software  process  management 

The  Process  Program  has  an  advisory  board  that  reviews  its  work  and  provides  informal 
comments  and  suggestions  to  guide  its  activities.  The  members  of  this  board  are: 

Dr.  Stephen  Fienberg  /  Carnegie  Mellon  University 
Dr.  Robert  Balzer  /  Information  Sciences  Institute 
Dr.  Lee  Osterweil  /  University  of  California,  Irvine 
Dr.  William  Curtis  /  MCC 
Mr.  Victor  Vyssotsky  /  Digital  Equipment  Corp. 

Mr.  Albert  Roberts  /  Defense  Systems  Management  College 

Because  of  their  broad  background  and  association  with  software  woik  in  DoD,  industry, 
and  academia,  the  board  members  provide  infonnal,  stimulating  discussions  of  the  pro¬ 
gram’s  activities  and  plans.  The  board  typically  meets  with  the  Process  Program  two  or 
three  times  a  year.  The  fourth  such  meeting  was  held  on  March  8-9;  participants  re¬ 
viewed  aspects  of  all  Process  projects. 


The  Software  Capability  Evaluation  (SCE)  Project  helps  DoD  acquisition  organizations 
to  evaluate  the  capability  of  contractors  to  competently  develop  and  maintain  software. 
The  project  is  improving  and  transitioning  an  evaluation  method  for  use  in  software¬ 
intensive  acquisitions. 

In  January  1990,  project  members  conducted  a  panel  at  the  first  Armed  Forces  Commu¬ 
nications  and  Electronics  Association  Military/Govemment  Computing  Conference  and 
Exposition.  The  panel,  titled  “Contractor  Software  Cs^bilities  Assessment  and  Evalu¬ 
ation  Panel,”  featured  five  speakers  who  discussed  their  experiences  with  the  SEI  soft¬ 
ware  capability  assessment  method.  In  addition  to  the  Process  Program  director  and  the 
SCE  project  leader,  representatives  from  IBM,  Raytheon,  and  Naval  Air  Development 
Center  participated.  The  conference  was  attended  by  200  participants  from  industry  and 
government 

The  project  presented  an  introductory  course  on  using  the  SCE  method  in  selecting  con¬ 
tractors  to  the  directors  and  program  managers  in  Space  and  Naval  Warfare  Systems 
Command  (SPAWAR)  in  Crystal  City,  Virginia.  As  a  result  SPAWAR  will  sponsor  the 
pilot  use  of  the  SCE  method  in  its  acquisitions.  ^ 


Software  Capability 
Evaluation 
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Projecl  members  conducted  a  woit^p  on  the  cqnbility  maturity  model  in  March  at  the 
SEI.  The  objectives  of  the  woricshcq)  were  to  promote  a  dialogue  on  the  project’s  revi¬ 
sion  effort  and  plans,  and  to  collect  reconunendations  on  the  software  oigineering  and 
management  i»actices  covoed  in  the  model.  Sixty-two  perqrle  from  40  govertunem  and 
industry  organizations  attended.  In  preparation  for  this  woricshop,  registrants  received  a 
paper  elaborating  the  iHecepts  underpinning  the  maturity  questionnaire  and  model,  a  set 
of  tables  itemizing  the  practices  needed  to  achieve  the  software  process  capability  stated 
in  the  model,  and  a  report  siuiunarizing  the  unresolved  change  requests  and  the  user 
comments  associated  with  each  change  request 

The  Questionnaire  Advisory  Board  (QAB)  met  for  the  fust  time  on  the  day  preceding 
the  workshop.  Composed  of  seven  govenunent  and  industry  software  professionals,  this 
board  will  independently  review  and  recommend  changes  to  SCE  products  prior  to  their 
release. 

The  project  drafted  a  product  offering,  which  is  a  one-page  description  of  the  SCE 
method,  its  use,  and  training  in  it  A  timeline  for  introducing  the  method  into  an  organi¬ 
zation  is  also  included. 


Software  Procesa 
Assessment 


The  Software  Process  Assessment  Project  assists  software  organizations  in  launching 
effective  process  improvement  programs,  characterizes  and  rqx>rts  on  the  software  engi¬ 
neering  ctq)abilities  of  defense  contractors,  and  defines  priority  needs  for  software  proc¬ 
ess  improvement  in  the  defense  community. 

Project  members  acted  as  observers  for  self-assessments  conducted  by  six  organizations: 
Software  Productivity  Consortium  in  Herndon,  Virginia:  Northrop  in  Los  Angeles,  Cali¬ 
fornia;  Computer  Sciences  Corporation  in  Gaithersburg,  Maryland;  AIRMICS  in 
Tyson’s  Corner,  Virginia;  Aluminum  Company  of  America  (ALCOA)  in  Warrick,  Indi¬ 
ana;  and  Tinker  Air  Force  Base  in  Oklahoma  City,  Oklahoma.  The  project  frequently 
provides  one  or  two  observers  experienced  in  assessments  to  attend  an  organization’s 
initial  self-assessment 

Project  members  and  Technology  Transition  staff  conducted  the  fifth  self-assessment 
training  session  at  the  SEI  in  February.  Thirty-two  registrants  from  five  aftiliate  organi¬ 
zations  attended.  The  training  prepares  software  professionals  to  assess  software  devel¬ 
opment  processes  within  their  organizations. 

Two  project  members  conducted  a  special  self-assessment  training  session  with 
ALCOA.  The  purpose  of  this  special  session  was  to  understand  the  process  implications 
of  training  secondary  or  site  assessment  team  members.  Project  members  also  examined 
the  assessment  of  small  projects. 

Two  of  the  four  SEI-assisted  assessments  planned  for  fiscal  year  1990  wm  completed 
during  this  quarter.  A  final  assessment  report  and  a  briefing  on  action  recommendations 
were  delivered  to  Medtronic  in  Minnetqwlis  in  January.  The  on-site  i^iase  was  com¬ 
pleted  for  Hughes  Aircraft  CompanyA3round  Systems  Group  in  Fulloton,  California. 
(During  the  on-site  phase,  the  assessment  team  conducts  extensive  discussions  with  pro¬ 
ject  managers  and  software  practitioners,  and  briefs  the  senior  executives  on  the  team’s 
view  of  the  organization’s  most  pressing  software  process  issues.)  A  final  assessmait 
repot  and  a  briefing  on  action  recommendations  were  delivered  to  Hughes  Aircraft 
Company/Ground  Systems  Group  in  March.  ^ 
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Assessment  team  training  was  completed  for  TRW  (Systems  Integration  Division  /  West 
Coast)  in  Redondo  Beach,  California.  Jet  Prt^ulsion  Latxvalories  (JPL)  submitted  a 
c(^  of  their  action  plan  for  review. 

Project  members  woe  invited  to  give  presentations  on  process  management  at  the  fol¬ 
lowing  organizations:  GE  Productivity  Forum  in  Pittsburgh,  Storagetek  in  Denver,  and 
the  Eight  Annual  National  Conference  on  Ada  Technology  in  Atlanta. 


The  Software  Process  Develq)ment  Project  is  advocating  the  use  of  measuremoit  in  the 
practice  of  software  development  and  management  Toward  that  end,  it  coordinates  a 
steering  committee,  two  working  groups,  and  a  best-practices  activity,  all  devoted  to 
encouraging  organizations  to  use  quantitative  methods  to  improve  their  software  process. 

The  Software  Metrics  Defmition  Working  Group  and  the  Software  Metrics  Acquisition 
Woridng  Group  met  separately  for  three  days  each  in  January.  Both  working  groups  are 
developing  documents  that  specify  measures  of  products,  processes,  and  project  charac- 
toistics  that  can  be  widely  and  consistendy  used.  Both  groups  have  scheduled  additional 
meetings  throughout  the  year  and  plan  to  complete  a  preliminary  draft  of  their  docu¬ 
ments  by  January  1991. 

The  Measurement  Stewing  Committee  met  for  two  days  in  March.  It  reviewed  the 
status,  direcdon,  and  progress  of  the  measurement  working  groups  and  projects.  The 
committee  endorsed  their  direcdon  and  pace. 

A  conespondence  group  was  formed;  it  will  be  the  source  for  future  openings  in  the 
working  groups  and  the  Measurement  Steering  Committee.  More  than  100  persons  out¬ 
side  the  SEI  are  involved  as  volunteers  in  the  measuremont  effort 

To  encourage  organizations  to  adqrt  measurement,  project  members  are  collecting  best 
practices  and  motivations,  which  will  be  published  in  an  SEI  technical  report  To  further 
the  collection,  project  members  visited  IBM  Systems  Integration  Division  in  Bethesda, 
Maryland;  Goddard  Space  Flight  Center  in  Greenbelt,  Maryland;  McDonnell  Douglas 
Helicopter  Co.  in  Mesa,  Arizona;  and  TRW  in  Carson,  California.  Additional  visits  are 
platmed. 

Project  members  made  presentations  to  the  AFCEA  (Armed  Forces  Communications  and 
Electronics  Association)  Computer  Conference  in  Washington,  D.C.,  the  Annual  NASA 
Software  Management  and  Assurance  Conference  in  San  Diego,  and  the  Strategic  De¬ 
fense  Initiative  Metrics  Tools  Fair  in  Colorado  Springs. 

The  project  hosted  representatives  from  the  European  ESPRIT  METKIT  (Metrics  Edu¬ 
cational  Toolkit)  project  for  two  days.  These  representatives  joined  the  correspondence 
group. 


Software  Process 
Devetopment 
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Software  Engineering  Methods 


The  primary  objective  of  the  Methods  Program  is  to  improve  the  practice  of  software 
engineering  by  improving  individual  and  team  productivity  through  the  identification 
and  transition  to  practice  of  emerging  software  technology.  Promoting  the  appropriate 
use  of  this  technology  supports  the  SEI  effort  to  transform  software  develc^ment  from 
an  ad-hoc,  labor-intensive  activity  to  a  technology-supported  engineering  discipline. 


The  Software  Development  Environments  Project  is  studying  the  problem  of  tool  con¬ 
figuration  management  and  is  tracking  the  state  of  environment  architectures,  with  a 
focus  on  configuration  management  (CM)  functionality. 

To  address  the  problem  of  managing  tool  configuration,  the  project  analyzed  paramet¬ 
erization  and  configuration  mechanisms  in  commercial  systems  and  investigated  the  fea¬ 
sibility  of  a  prototype  tool  that  supports  the  configuration  management  of  tools  in  a  dis¬ 
tributed  workstation  environment  This  quarter,  project  members  analyzed  a  tool  version 
management  technique  in  a  commercial  system,  and  completed  an  initial  data  model  for 
the  tool  configuration  modeling  prototype. 

As  part  of  an  effort  to  assess  advances  in  CM  support  and  new  CM  concepts,  the  project 
has  recognized  three  major  usage  models  in  recent  commercial  CM  systems.  This  quar¬ 
ter  the  project  leader  presented  this  information  as  part  of  an  all-day  tutorial  titled  “Soft¬ 
ware  Configuration  Management:  Advances  in  Software  Development  Environments"  at 
the  I2th  International  Conference  on  Software  Engineering  GCSE).  Project  members 
also  completed  experiments  and  a  draft  report  on  the  benefits  and  limitations  of  one  of 
the  three  usage  models  as  realized  in  the  Sun  Network  Software  Environment  (NSE). 

The  project  leader,  who  is  chairing  the  3rd  Intematicmal  Software  Configuraticm  Man¬ 
agement  Workshop  to  be  held  in  June  1991  in  Norway,  issued  a  call  for  participation. 


To  develop  a  fundamental  understanding  of  structures  for  the  software  architecture  level 
of  design,  this  project  is  describing  basic  design  elements  used  in  the  description,  analy¬ 
sis,  and  development  of  software  systems. 

lYoject  members  attended  and  presented  at  several  ccmferences,  including  the  Human- 
Computer  Interaction  Consortium  and  an  architecture  workshop  at  Bell  Labs. 

In  January,  a  project  member  presented  a  scheme  for  describing  and  classifying  archi¬ 
tectural  choices  in  user  interface  software  at  the  quarterly  meeting  of  the  IEEE  Stan¬ 
dards  Committee  PI  201  in  New  Orleans.  This  committee  is  working  on  standards  for 
graphical  user  interface  software.  ^ 


Software  Development 
Environments 


Software  Architecture 
Design  Principles 
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The  Association  for  Computing  Machinery  (ACM)  published  extensive  excerpts  from  a 
workshop  run  by  the  project  leader.  The  excerpts  appeared  in  Communications  of  the 
ACM. 

An  interview  with  the  project  leader  on  engineering  history  and  its  lessons  for  software 
was  published  in  the  March  1990  issue  of  IEEE  Software. 

The  project  leader  continued  to  be  involved  in  public  service  activities,  including  attend¬ 
ing  the  January  meeting  of  the  Computer  Science  and  Technology  Board. 


Software  Process 
Modeling 


The  Software  Process  Modeling  Project  is  investigating  techniques  for  modeling  the 
software  development  and  maintenance  process. 

In  February,  project  members  delivered  the  F-16  as-implemented  PDSS  process  model 
to  Ogden  Air  Logistics  Center,  and  delivered  a  draft  document  providing  an  overview 
of  this  model. 

As  part  of  the  remaining  Ogden  effort,  project  members  are  developing  a  model  of  the 
post-deployment  software  support  process  detailed  in  the  draft  of  MIL-HDBK-347,  en¬ 
titled  “Mission-Critical  Computer  Resources  Software  Support”.  Progress  on  this  model 
was  also  reviewed  at  the  Ogden  meeting  in  February.  Plans  for  continuing  interactions 
during  the  remainder  of  the  {X'oject  were  also  discussed. 

In  January,  a  special  session  of  the  23rd  Annual  Hawaii  International  Conference  on 
System  Sciences,  entitled  “Software  Engineering  Practices:  Models  and  Analysis,”  was 
organized  and  chaired  by  a  project  member.  The  introduction  to  the  session,  and  the  set 
of  scholarly  papers,  appear  in  the  ccmference  proceedings. 

Project  members  gave  a  briefrng  on  software  process  modeling  work  completed  for 
NAVAIR.  The  presentation  was  for  the  NAVAIR  TECR  (Tactical  Embedded  Computer 
Resources)  Executive  Advisory  Committee,  consisting  of  the  chief  1-2  software  execu- 
tive(s)  from  each  of  5  Navy  labs  supporting  NAVAIR  weapon  systems  (for  example. 
Naval  Air  Development  Center  [NADC],  Naval  Weapons  Center  [NWC],  Pacific  Mis¬ 
sile  Test  Center  [PMTC],  etc.). 

A  technical  meeting  was  held  with  the  Office  of  Naval  Technology,  during  which  a 
briefing  was  given  on  software  process  modeling. 

The  project  hosted  a  technical  interchange  meeting  with  personnel  from  NADC.  The 
NADC  group  is  embarking  on  a  process  analysis  and  improvement  efibrt  for  certain 
staff  functions  at  NAVAIR  in  Washington. 

The  SEI  was  represented  by  a  project  member  at  the  bimonthly  meeting  of  the  Joint 
Logistics  Commanders  (JLC)  post  deployment  software  support  (PDSS)  Subgroup.  This 
is  a  group  chartered  by  the  JLC  to  address  the  special  needs  and  concerns  of  software 
support 
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Domain  Analysis 


The  Domain  Analysis  Project  is  developing  and  testing  methods  for  performing  domain 
analysis  to  support  software  reuse.  The  primary  objective  of  the  project  is  to  define  a 
IHtx:ess  and  set  of  products  to  support  the  systematic  discovery  and  exploitation  of  com¬ 
monality  across  related  software  systems. 

The  project  established  three  phases  for  domain  analysis;  scoping,  which  defines  a  do¬ 
main  for  aiuilysis;  domain  modeling,  which  provides  a  description  of  the  problems 
within  the  domain;  and  architectural  modeling,  which  creates  the  software  architecture(s) 
that  implements  a  solution  to  the  problems  in  the  domain. 

During  this  quarter,  the  project  entered  a  feasibility  study  phase.  Project  members  are 
defining  methods  and  applying  them  to  a  small  test  domain. 

Project  members  made  several  presentations  at  external  events,  including;  “Designing 
for  Reuse;  Is  Ada  Class-Conscious?”  at  the  Realities  of  Reuse  Woilcshop  sponsored  by 
Syracuse  Univosity;  “Software  Reuse  Technology,”  a  tutorial  at  the  Eighth  Armual  Na¬ 
tional  Conference  on  Ada  Technology;  and  a  presentation  at  the  First  International 
Workshop  on  Advanced  Computing  in  Seoul,  Korea. 
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Software  Systems 

The  goal  of  the  Systems  Program  is  to  improve  the  development  of  real-time  distributed 
systems  by  integrating  software  engineering  with  systems  engineering  and  reducing  the 
risk  of  new  technology. 


The  Real-Time  Embedded  Systems  Testbed  (REST)  Project  is  collecting,  classifying, 
generating,  and  disseminating  information  about  software  development  for  real-time  em¬ 
bedded  systems. 


Real-Time  Embedded 
Systems  Testbed 


Project  members  completed  the  first  version  of  the  Hartstone  benchmarir,  a  set  of  timing 
requirements  for  testing  a  system’s  ability  to  handle  hard  real-time  applications.  The 
accompanying //amrone  User's  Guide,  Version  7.0(CMU/SEl-90-UG-l)  describes  the 
structure  and  behavior  of  an  Ada  implementation  of  one  categny  of  Hartstone  require¬ 
ments,  the  periodic  harmonic  (PH)  test  series.  The  Ada  implementation  of  the  PH  test 
series  is  aimed  primarily  at  real-time  embedded  processors,  where  the  only  executing 
code  is  the  benchmaric  and  the  Ada  runtime  system.  The  objective  of  the  PH  series  is  to 
provide  a  set  of  tasks  that  are  periodic  and  harmonic,  these  being  common  in  real-time 
applications.  Plans  have  been  devel(^)ed  for  distributing  the  Hartstone  program  and  re¬ 
ceiving  feedback  from  users. 


SEI  testing  of  the  IBM  Real-Time  Communication  Network  (RTCN)  has  uncovoed 
low-level  timing  anomalies  internal  to  the  RTCN.  The  test  programs  were  delivered  to 
IBM  in  Manassas,  where  they  are  currently  investigating  the  problem.  The  SEI  and  IBM 
are  both  working  on  developing  suitable  workarounds  to  this  problem. 

Several  distributed  processing  activities  are  currently  underway.  First,  jaoject  members 
are  writing  a  concept  paper  on  real-time  distributed  system  issues  with  an  emphasis  on 
schedulability.  Second,  the  project  is  considering  several  real-time  distributed  demon¬ 
stration  systems  for  incorporation  into  its  testbed.  These  systems  include  an  enhanced 
version  of  the  avionics  software  system  currently  in  use  by  the  SEI  Software  for  Hetero¬ 
geneous  Machines  Project,  as  well  as  the  real-time  scenarios  described  in  the  paper 
“Real-Time  System  Scenarios,”  delivered  by  Pat  Watson  (IBM,  Manassas)  to  the  Office 
of  Naval  Research.  Third,  project  members  are  defining  real-time  benchmark  programs 
for  testing  the  throughput,  predictability,  and  schedulability  of  distributed  networks. 


The  project  successfully  tested  a  new  connection  strategy  for  its  testbed — a  strategy  that 
allows  greater  connectivity  between  workstations,  hosts,  and  target  machines. 


The  Real-Time  Scheduling  in  Ada  Project  is  demonstrating  how  to  design  and  imple¬ 
ment  real-time  systems  using  analytic  scheduling  algorithms. 

Project  members  made  a  presentation  to  the  PAVE  PACE  visiuvs  from  Wright- 
Patterson  Air  Force  Base  on  the  prospects  for  using  rate  monotonic  theory  in  distributed 
applications.  The  project  is  attempting  to  establish  a  formal  relationship  with  the  PAVE 
PACE  Program  as  a  vehicle  for  extending  and  transitioning  real-time  scheduling  in  Ada 
technology  to  distributed  systems.  ^ 


Real-Time  Scheduling 
In  Ada 
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The  project  completed  an  analysis  of  problems  that  might  be  encountered  in  standardiz¬ 
ing  commercial  backplanes,  local  area  networks,  and  operating  systems  for  use  on 
real-time  Navy  systems.  An  important  recommendation  was  to  suggest  that  work  on 
operating  system  standardization  pay  more  attention  to  p^ormance  issues,  namely,  by 
specifying  performance  standards  to  help  ensure  that  conforming  implementations 
provide  predictable  and  acceptable  worst-case  performance  when  used  for  real-time 
applications. 

NASA  Space  Station  is  considering  making  a  commitment  to  using  rate  monotonic 
scheduling  theory  as  the  default  approach  for  real-time  work.  Project  members  addressed 
the  concerns  of  IBM,  McDonnell  Douglas,  and  NASA  representatives  about  the  risks  of 
adopting  rate  monotonic  theory. 

Work  began  on  transitioning  real-time  scheduling  in  Ada  technology  to  the  Navy’s 
BSY-2  Program.  In  March,  the  project  held  a  two-day  workshop  with  BSY-2  engineers 
to  explore  the  applicability  of  rate  monotonic  theory  to  BSY-2.  This  workshop  was  the 
first  of  a  series  of  planned  technical  interactions. 

A  draft  of  the  FutureBus+  handbook,  which  discusses  how  to  make  effective  use  of  the 
FutureBus-f  design,  was  completed  and  sent  to  review. 

An  article  on  rate  monotonic  scheduling  and  its  ai^lication  to  Ada  was  accepted  for 
publication  by  Computer  Magazine.  The  article  will  appear  in  the  April  1990  issue. 


The  User  Interface  Project  is  developing  Serpent,  a  user  interface  management  system. 
Serpent  separates  the  concerns  of  the  user  interface  from  those  of  the  application,  which 
allows  integration  of  input/output  technologies  without  modifying  the  functional  portion 
of  the  application. 

Four  Open  Software  Foundation  Motif  widgets — the  bulletin  board,  text,  label,  and  push 
button — were  integrated  into  Serpent  Development  also  continued  on  an  interactive  edi¬ 
tor  that  will  allow  the  visual  specification  of  user  interfaces. 

Three  project  members  presented  a  Serpent  tutraial  at  the  Third  X  Window  Technical 
Conference  in  Boston.  There  were  more  than  100  attendees,  many  of  whom  are  inter¬ 
ested  in  Serpent  The  project  leader  chaired  a  birds-of-a-feather  session  on  UIMSs  at¬ 
tended  by  more  than  70  people. 

A  Serpent  presentation  was  made  by  a  former  resident  affiliate  to  the  USENIX  Winter 
Conference.  Project  members  also  gave  Serpent  presentations  at  ESL,  TRW,  Computer 
Science  Corporation,  and  a  NASA  workshop  on  the  workstation  of  the  future. 

There  are  currently  more  than  75  users  of  Serpent  divided  among  research,  academic, 
and  industrial  sites. 
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The  Software  for  Het^ogeneous  Machines  Project  is  developing  tools  and  a  methodol¬ 
ogy  for  building  distributed,  large-grained,  concurrent  applications  running  on  heteroge¬ 
neous  machine  networks.  The  project  has  developed  Durra,  a  language  for  describing 
distributed  applications  as  a  set  of  task  descriptions  tuid  type  declarations  that  prescribe 
a  way  to  manage  the  resources  of  the  network. 

Project  members  completed  the  initial  port  of  the  Durra  runtime  to  the  Nectar  architec¬ 
ture  developed  by  the  CMU  School  of  Computer  Science  and  have  successfully  run  a 
simple  Durra  application  on  one  Nectar  host  Woiic  will  continue  to  distribute  the  appli¬ 
cation  over  multiple  Nectar  hosts  and  to  allow  for  dynamic  reconfiguration. 

Project  members  redesigned  the  C  version  of  the  Durra  interface  in  the  process  of  mak¬ 
ing  it  conform  to  the  Ada  version.  Durra  applications  tasks  can  be  written  in  C  and  Ada. 


Software  for 

Heterogeneous 

Machines 


Project  members  submitted  an  article  on  developing  fault-tolerant  distributed  systems  to 
the  1989  SEI  Technical  Review.  The  article  describes  the  fault-tolerant  features  of  Durra. 


The  project  leader  presented  a  paper  on  the  Durra  language  at  the  3rd  IEEE  Computer 
Society  International  Conference  on  Computer  Languages  in  New  Orleans.  This  biennial 
conference  is  organized  by  the  IEEE  Computer  Society  Technical  Committee  on  Com¬ 
puter  Languages.  The  project  leader  was  appointed  General  Chairman  for  the  1992  con¬ 
ference. 


The  project  is  working  with  several  technology  transition  partners  to  build  prototyping 
and  modeling  tools  for  real-time  systems  using  Durra:  Institute  for  Simulation  and 
Training  (University  of  Central  Florida),  MITRE  Corporation,  Hughes  Aircraft  Crapora- 
tion,  and  GTE. 

The  project  leader  and  a  member  of  the  Technology  Applications  group  visited  NASA 
Langley,  Naval  Research  Laboratory,  University  of  Maryland,  and  NASA  Goddard  to 
gather  information  for  a  survey  of  software  engineering  technology  for  distributed  avion¬ 
ics  applications. 


Inertial  Navigation  System  Simulator  Program:  Top-Level  Design 
(CMU/SEI-89-TR-38) 

Hartstone  Benchmark  User’s  Guide,  Version  1.0 
(CMU/SEI-90-UG-1) 

For  information  on  how  to  order  reports,  see  page  27. 
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Education 


The  primary  objective  of  the  SEI  Education  Program  is  to  increase  the  number  of  highly 
qualified  software  engineers  by  r^idly  improving  software  engineering  education 
throughout  the  education  communities  of  academia,  government,  and  industry.  To  ac¬ 
complish  this,  the  projects  of  the  Education  Program  focus  on  accelerating  the  develop¬ 
ment  of  software  engineering  programs  in  academia  and  on  enhancing  opportunities  for 
the  continuing  education  of  practitioners. 

The  University  of  Arizona  has  become  an  academic  affiliate.  The  academic  affiliates  are 
educational  institutions  who  have  contractually  joined  the  SEI  in  cooperative  efforts  of 
mutual  interest  These  efforts  include  work  in  education,  training,  research,  development 
or  technology  transition. 

Two  new  courses  were  offered  by  Carnegie  Mellon  as  part  of  its  new  Master  of  Soft¬ 
ware  Engineering  (MSE)  program,  a  joint  effort  between  the  SEI  and  the  CMU  School 
of  Computer  Science.  The  Software  Development  Seminar  features  a  series  of  lectures 
by  software  professionals.  This  course  encourages  active  participation  of  the  students 
and  lecturers.  The  Software  Development  Studio  consists  of  a  team  effort  by  the  sUi- 
dents  to  complete  all  phases  of  a  realistic  software  development  project  Four  students 
are  enrolled  in  each  of  these  courses. 


The  Software  Engineering  Curriculum  Project  is  developing  model  curricula,  promoting 
the  creation  of  both  graduate  and  undergraduate  software  engineering  programs  in  the 
academic  community,  and  increasing  the  amount  of  software  engineering  content  in  both 
graduate  and  undergraduate  computer  science  programs.  The  project  develq[)s  curricu¬ 
lum  modules,  classroom  support  materials,  and  other  educational  materials  to  promote 
the  teaching  of  software  engineering.  It  holds  a  semi-annual  Educator  Development 
Workshop  (formerly  called  Faculty  Development  Workshop)  and  an  annual  Conference 
on  Software  Engineering  Education  as  two  of  the  maihanisms  for  disseminating  its  work 
to  the  education  community. 

The  Seventh  SEI  Educator  Development  Workshop  (EDW)  was  held  in  January  1990. 
The  85  attendees  included  representatives  from  more  than  SO  colleges  and  universities, 
and  7  corporations.  Participants  attended  a  half-day  tutorial  on  software  reliability  meas¬ 
ures  as  well  as  formal  presentations  and  small-group  discussion  sessions.  They  also 
received  educational  materials  and  curriculum  modules  on  tq)ics  such  as  software  speci- 
Hcadon  and  requirements,  design  methods  for  real-time  systems,  teaching  software  engi¬ 
neering  ethics,  and  teaching  writing  to  software  engineerings.  (See  the  document  list  on 
page  15  for  new  releases.) 

A  visiting  scientist  from  the  University  of  Ulster,  Northern  Ireland,  has  begun  a  six- 
month  sabbatical  at  the  SEI.  He  is  currently  working  on  the  development  of  a  curriculum 
module  on  concurrent  programming,  which  will  be  available  in  April.  ► 


Software  Engineering 
Curriculum 
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The  1990  SEJ  Report  on  Undergraduate  Software  Engineering  Education  (CMU/ 
SEI-90-TR-3)  was  released  in  March.  The  repent  discusses  fundamental  issues  of  under¬ 
graduate  software  engineering  education  and  inovides  information  about  topics  such  as 
course  content  and  accreditation. 

The  project  leader  gave  a  talk  titled  “The  Future  of  Software  Engineering  Education”  as 
part  of  a  colloquium  series  sponsored  by  the  compute-  science  department  at  the  Univer¬ 
sity  of  Iowa.  The  talk  was  telecast  to  Rockwell  in  Cedar  Rapids. 

The  project  leader  also  presented  a  tiUorial  on  teaching  a  software  engineering  project 
course  at  the  ACM  SIGSCE  Technical  Symposium  on  Computer  Science  Education. 


Video  Dissemination 


The  Video  Dissemination  Project  provides  courses  on  modem  st^tware  engineering 
methods.  The  project  has  three  series  of  videotaped  courses:  the  Academic  Series,  which 
develops  graduate  courses  that  are  offered  by  universities  fev  academic  credit;  the  Con¬ 
tinuing  Education  Series,  which  offers  noncredit  courses  to  software  practitioners  in  gov- 
enunent  and  industry;  and  the  Technology  Series,  which  provides  stand-alone  i»esenta- 
tions  that  promote  awareness  of  emaging  issues  and  leading-edge  technologies. 

The  Acadnnic  Series  began  its  sixth  semester  of  production  by  videotaping  two  courses: 
Software  Creation  and  Maintenance,  and  Software  Verification  and  Validation  (version 
2).  Presentation  of  these  courses  began  at  Carnegie  Mellon  University  in  January.  The 
videotaped  versions  will  be  available  to  participating  schools  for  the  fall  1990  semester. 

The  videotaped  version  of  Software  Design  is  offered  this  term  at  McGill  University, 
Eastern  Michigan  University,  and  University  of  Houston,  Qear  Lake.  Software  Verifica¬ 
tion  and  Validation  is  offered  at  Mississippi  State  University,  East  Tennessee  State 
University,  and  the  University  of  Minnesota,  Duluth.  Software  Project  Management  is 
offered  at  Carnegie  Mellon  University,  Florida  Atlantic  Univosity  (six  sites),  Florida 
Institute  of  Technology,  Rose-Hulman  Institute  of  Technology,  The  Wichita  State 
University,  Eastern  Michigan  University,  and  Temple  University.  Tutors  for  these 
courses  attended  a  one-day  orientation  session  at  the  SEI. 

In  the  Continuing  Education  Series,  the  third  oftering  of  Software  Project  Management 
for  Tutors  course  was  completed  this  quarter.  Eight  individuals,  rqnesenting  the  Na¬ 
tional  Security  Agency.  Martin  Marietta,  and  McDonnell  Douglas  completed  the  course 
and  received  S.4  continuing  education  units.  They  are  now  qualified  to  serve  as  learning 
facilitators-or  “tutors"-for  the  course  at  their  respective  organizations.  The  tutors  re¬ 
ceived  guidance  in  tailoring  the  course  to  meet  the  educatioial  requirements  of  their  or¬ 
ganizations. 

Six  instnictcns  from  the  Air  Force  Institute  of  Technology  (AFTT)  and  one  rqnesentative 
each  firom  General  Dynamics  and  the  University  of  Scranton  are  spending  six  months  at 
the  SEI  participating  in  a  Course  Development  Workshop.  The  workshop  participants 
are  working  with  SEI  staff  members  to  define  the  content  of  and  develop  materials  for 
AFTT  software  engineoing  courses.  The  five  graduate-level  continuing  education 
courses  resulting  from  this  workshop  will  be  presented  at  AFTT  by  its  own  instructors. 
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The  Advanced  Learning  Technologies  (ALT)  Project  is  using  hardware  and  software 
technologies  to  teach  software  code  inspections.  Interactive,  technology-intensive  train¬ 
ing  can  be  distributed  economically  to  a  broad  audience  and  can  provkte  an  elective 
learning  experience. 

The  ALT  project  leader  demonstitued  ALT  wcmIc  as  part  of  a  panel  at  the  Fifth  Interna¬ 
tional  CD-ROM  Conference  and  Exposition  sponsored  by  Microsoft  in  February.  Also 
on  the  panel  woe  representatives  from  Apple.  Ashton-Tate,  and  Metamedia,  a  DoD  CD- 
ROMAnteracdve  video  producer. 

The  first  CD-ROM  check  disk  was  created.  Project  members  are  currently  integrating 
and  testing  the  data  oi  this  disk  with  existing  code.  A  second  check  disk  will  be  made, 
based  on  the  results  of  these  tests.  Parse  tables  were  integrated  into  the  talk  interface. 
These  parse  tables  interpret  what  the  student  of  the  code  inqtections  course  says  and 
allows  the  student  to  take  an  active  role  in  an  inspection  simulation. 

“Intelligent  Interactive  Video  Simulation  of  a  Code  Inspection,”  by  the  |»oject  leader, 
has  been  translated  into  Japanese  and  published  in  the  journal  Nikkei  Artificial  Intelli¬ 
gence.  The  paper  originally  appeared  in  the  July  1989  issue  of  Communications  of  the 
ACM. 

The  project  leader  was  interviewed  for  an  ACM  iuticle  and  iq>peared  in  an  ACM  Video 
Presentation  titled  “Interactive  Digital  Video.”  The  SEI  Software  Engineering  Video 
Network  provided  editing  facilities  and  personnel.  The  video  was  distributed  by  ACM 
Press  in  conjunction  with  a  special  edition  of  the  Communications  of  the  ACM.  The  pro¬ 
gram  featured  interviews  with  prominent  figures  in  digital  video^ultimedia  develop¬ 
ment  and  research. 


1990  SEI  Report  on  Undergraduate  Software  Engineering  Education 
(CMU/SEI-90-TR-3) 

Software  Specifications:  A  Framework 
(SEI-CM-1 1.2.0) 

Software  Requirements 
(SEI-CM-19.1.1) 

Software  Design  Methods  for  Real-Time  Systems 
(SEI-CM-22-1.0) 

For  '.;  .fonnation  on  how  to  order  modules  and  reports,  see  page  27. 
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Ada  &  STARS  Support 


As  Ada  matures  and  Us  use  becomes  more  common  within  the  mission-critical  computer 
resource  (MCCR)  community,  users  will  be  faced  with  the  benefits  and  problems  of 
adopting  more  disciplined  approaches  to  software  eagineering.  The  goals  of  the  Ada  and 
STARS  (Software  T%hnology  for  Adaptable.  Reliable  Systems)  Support  Effort  are  to 
remove  technical  and  managerial  impediments  to  the  adoption  of  Ada.  to  support  die 
DoD  STARS  Program  in  technology  development  and  transition  efforts,  and  to  explore 
the  advantages  and  disadvantages  of  new  software  eagineering  approaches  and  para¬ 
digms  made  possible  by  Ada  language  feauires. 


The  Software  Architectures  Engineering  (SAE)  Project  provides  technical  guidance  to 
DoD  program  offices  in  an)lying  innovative,  model-based  software  engineering  solu¬ 
tions  to  the  problems  that  characterize  an  qiplication  domain.  The  project  is  working 
with  the  Granite  Sentry  Program  Office  on  part  of  the  replacement  for  the  NORAD  sys¬ 
tem  in  Cheyenne  Mountain,  and  with  the  Army  WWMCCS  Information  System  (AWIS) 
Program  Office.  The  project  is  also  working  with  the  Advanced  Millimeter- Wave  Seeker 
(AMMWS)  Program  Office  to  change  the  Maverick  air-to-ground  missile  seeker  from 
infrared  sensing  to  millimeter-wave  radar  sensing,  with  Ada  as  the  implementation  lan¬ 
guage.  In  each  effort,  project  members  are  taking  an  active  role  in  the  design  and  devel¬ 
opment  of  the  system. 

Project  members  frnalized  A  Model  Solution  for  C3I  Translation  and  Validation  (CMU/ 
SEI-89-TR-12).  a  document  on  the  Message  Translation  and  Validation  (MTV)  model, 
which  is  available  for  public  release.  The  document  was  sent  to  Granite  Sentry  represen- 
tatives  and  more  than  SO  other  intoested  contractors  and  government  organizations.  A 
sizing  analysis  was  performed  on  the  MTV  code  to  reduce  the  MTV  typecaster  object- 
code  size  on  the  Granite  Sentry  Phase  n  workstations.  The  results  were  transmitted  to 
Granite  Sentry. 

Project  members  also  collected  and  examined  Phase  n  metric  infonnatioa  to  gain  insight 
into  the  advantages  and  disadvantages  of  the  modeling  qifsoach  to  software  develop¬ 
ment  Discussions  with  Granite  Sentry  revealed  that  the  infonnation  that  has  been  col¬ 
lected  is  too  high  level.  Future  discussions  will  decitte  which  metrics  are  needed  and  can 
reasonably  be  collected. 

Project  members  attended  the  Phase  n  test-readiness  review  to  assess  how  Phase  n  is 
progressing.  Project  members  also  attended  the  Architecture  Waking  Group  meeting  to 
provide  input  on  modeling  and  to  address  issues  and  concerns  regarding  new  message 
sets  for  future  phases  of  Granite  Sentry.  Finally,  project  members  began  planning  for 
potential  participation  on  Granite  Sentry  in  the  future. 

Project  members  supported  the  STARS  AMMWS  Shadow  Project  by  reviewing  the  Her¬ 
cules  Project  frnal  rqxnt  and  helping  Hercoles  prepare  a  presentation  for  the  February 
AdaJUG.  Woric  has  begun  on  the  frnal  lessons-leamed  report  ^ 


Software  Architectures 
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Project  members  began  wmting  with  the  Defense  Advanced  Research  Projects  Agency 
(DARPA)  to  help  organize  and  possibly  participate  in  a  new  program.  Domain  Specific 
Aichitectuies  (DSA).  DARPA  has  approved  the  program,  and  funding  issues  are  being 
addressed.  The  first  task  will  be  to  mganize  an  exploratory  workshc^  to  determine  the 
goals  and  objectives  of  the  DSA  Program. 

At  the  request  of  tire  Air  Force  Electronic  Combat  OfTree  (AFECO)  at  Wright- 
Patterson  AFB,  i^oject  members  (Xganized  and  conducted  a  workshop  for  Electronic 
Combat  Office  system  users  and  designers  to  assess  the  limitations  of  current  environ¬ 
ments  and  military  hardware  platfmms.  As  a  result  of  the  wwkshop,  AFECO  requested 
that  the  SAE  Project  continue  working  with  them  on  an  IS-mondi  experimental  modd- 
ing  effort,  the  Electronic  Combat  Digital  Evaluation  System.  Project  members  are  writ¬ 
ing  a  direct  suppot  agreement  for  that  effort 

The  project  continued  work  on  developing  model  solutions  to  recurring  proUems  fw 
the  AWIS  Program.  The  MTV  software  developed  for  the  Granite  Sentry  Program  was 
modified  to  meet  the  requirements  of  the  AWIS  Program.  A  model  solution  for  a  ge¬ 
neric  report  generator  was  also  developed. 

Project  members  analyzed  design  documents  and  Ada  code  from  Release  1  of  the  mo¬ 
bilization  and  deployment  segment  and  from  Release  2  of  the  tranqxrrtation  segment 
to  identify  potential  models  for  reuse  on  AWIS. 

Project  members  wtnked  with  two  other  SEI  projects-the  User  Interface  Project  and  die 
Binding  of  Ada  and  SQL  Project-to  begin  development  of  model  solutions  for  a  man- 
machine  interface  and  fcv  an  applkatron-database  interface. 


The  Binding  of  Ada  and  SQL  Project  initiated  at  the  request  of  the  Ada  Jdnt  Program 
Office  (AJPO),  has  investigated  the  problem  of  binding  the  Ada  jnogramming  language 
with  the  Structured  Query  Language  (SQL)  database  language.  The  solution  to  this  prob¬ 
lem  was  the  specification  of  the  SQL  Ada  Module  Extensions  (SAME),  an  interface  that 
permits  an  application  program  written  in  Ada  to  access  and  manipulate  data  controlled 
by  a  database  management  system  (DBMS)  using  SQL. 

The  SAME-Design  Committee  (SAME-DC),  a  group  of  experts  from  government,  in¬ 
dustry,  and  academia,  met  in  Fetmiary  in  Irvine,  California,  and  completed  the  descrip¬ 
tion  of  the  language  fcM'  describing  SAME  application  interfaces.  This  language  is  now 
known  as  the  SQL  Ada  Afodule  ZTescription  Language  (SAMeDL).  An  updated  version 
of  the  SAMeDL  reference  manual  is  scheduled  to  be  produced  during  the  second  quarter 
of  1990.  The  June  meeting  of  the  SAME-DC  will  be  held  in  conjunction  with  the  June 
meeting  of  the  International  Standards  Organization  Working  Group  on  Ada  (ISO/ 
WG9).  The  current  plan  is  to  present  the  updated  manual  to  the  Ad^QL  subgroup  of 
WG9. 

Recently,  the  Army  Tactical  Command  and  Control  System  (ATCCS),  a  $400-million. 
three-year  project,  has  committed  to  using  the  SAME  and  the  SAMeDL.  The  (wganiza- 
tion  developing  SIDreRS-3,  the  new  Army  personnel  system,  has  used  the  manual  im¬ 
plementation  of  the  SAME  (as  described  in  CMU/SEI-89-TR-16).  Representatives  from 
both  ATCCS  and  SIDPERS-3  have  joined  the  SAME-DC. 
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The  Ada  Joint  PiQgram  Office  (AJPO)  has  decided  that  a  revision  to  the  Ada  langi^ge 
standard  is  required  to  maintain  it  as  a  standard  (ANSI/MIL-STD-181SA).  This  revision 
process  is  commonly  referred  to  as  Ada  9X.  The  pinpose  of  this  project,  begun  in  Febru¬ 
ary  1989,  is  to  identify  and  evaluate  potential  areas  for  revising  the  Ada  standard  based 
on  the  experiences  of  software  developers  and  compile  implementors.  This  project  is 
providing  an  OTganizational  frameworlc  to  help  guide  revision  activities. 


Study  and  Analysis 
for  Ada  9X 


Project  staff  advised  the  Ada  9X  Project  Office  on  proposals  submitted  for  the  mapping/ 
revision  effort  Reports  on  shared  variables  and  fixed-point  types  were  piepmed  and  de¬ 
livered  to  the  project  office.  Work  proceeded  on  the  preparation  of  additional  reports  on 
reuse,  input/output  optimization  issues,  mathematical  processing,  real-time,  and  distrib¬ 
uted  systems,  and  on  review  of  draft  revision  requirements  submitted  by  the  require¬ 
ments  team. 


The  project  was  represented  at  the  third  Distinguished  Reviewer  meeting  at  the  end  of 
March.  Distinguished  Reviewers  are  a  group  of  experts  appointed  by  the  Ada  9X  Project 
Office,  and  part  of  the  work  under  the  Ada  9X  direct  support  agreement  is  to  attend  their 
meetings. 


A  Model  Solution  for  C3I  Translation  and  Validation 
(CMU/SEI-89-TR-12) 


For  information  on  how  to  order  reports,  see  page  27. 
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► 

The  Distributed  Ada  Real-Time  Kernel  (DARK)  Project  concluded  development  and  es¬ 
tablished  baseline  version  3.0  of  the  Kernel  software  and  documentation,  available  for 
two  targets:  MC68020  and  VAX/VMS.  The  Kernel  software,  documentation,  and  other 
DARK-related  information  are  now  available  for  anonymous  ftp  to  the  public,  and  are 
also  available  from  the  SEI  in  tape  form;  30  copies  of  version  3.0  have  been  sent  out  to 
new  and  existing  DARK  users  in  government,  industry,  and  academia.  The  DARK  Tran¬ 
sition  Project  will  host  a  workshop  on  July  10-12  to  discuss  “Architecture  for  Real-Time 
Systems.”  The  primary  goal  of  this  wcrkshop  is  to  bring  together  users  of  real-time,  em¬ 
bedded  systems  to  share  solutions  to  cotrunon  problems,  to  identify  future  directions,  and 
to  discuss  what  can  be  done  to  improve  the  state  of  the  practice. 


Affiliate  Relations 


The  Affiliate  Relations  Function  establishes  and  maintains  SEI  relationships  with  indus¬ 
try  and  government  organizations.  Affiliate  Relations  also  negotiates  and  places,  with 
the  cooperation  of  the  SEI  Joint  Program  Office,  government  and  industry  resident  affili¬ 
ates  at  the  SEI.  The  SEI  Education  Program  manages  academic  affiliates  and  visiting 
scientists  from  academia. 

Sixteen  new  industry  affiliates  signed  information  exchange  agreements  during  this  quar¬ 
ter:  All  Systems  Inc.;  American  Institute  for  Research;  Ball  Systems,  Engineering  Divi¬ 
sion;  Boeing  Commercial  Airplane  Group;  E-Systems,  ECI  Division;  Eyring  Inc.; 
Logicon  Inc.;  Mantech  Services  Corporation;  The  Matrix  Group;  Metalwcvking  Technol¬ 
ogy  Inc.;  Objective  Interface  Systems  Inc.;  Plessey  Electronic  Systems  Corporation; 
Schlumberger  Laboratory  for  Computer  Science;  Software  Process  Innovations; 

Sonicraft  Inc.;  and  Systems  Control  Technology  Inc. 

Thirteen  new  resident  affdiates  fi’om  the  following  organizations  joined  the  SEI  this 
quarter:  seven  from  the  Air  Force  Institute  of  Technology  and  one  each  from  Computer 
Sciences  Corporation;  Electronics  Systems  Division,  United  States  Air  Force;  General 
Dynamics;  Gunter  Air  Force  Base;  National  Security  Agency;  and  Wright-Patterson  Air 
Force  Base.  Four  resident  affiliates  concluded  their  work  at  the  SEI  during  this  quarter. 
As  of  March  31,  1990,  twenty  resident  affiliates  were  working  at  the  SEI:  six  from  in¬ 
dustry  and  fourteen  from  the  services  and  government  agencies. 

Members  of  Affiliate  Relations  conducted  SEI  Visitors  Day  on  February  IS.  This  event 
is  held  quarterly  to  accommodate  the  increasing  requests  for  visits  to  the  SEI.  Twenty 
representatives  from  nine  companies  and  two  government  organizations  attended.  The 
next  two  Visitors  Days  are  scheduled  for  May  17, 1990  and  August  23,  1990.  Visitors 
must  contact  Affiliate  Relations  to  register  for  Visitors  Day;  walk-ins  are  not  accepted. 

In  this  quarter.  Affiliate  Relations  began  planning  for  the  1990  SEI  Affiliates  Sympo¬ 
sium,  to  be  held  September  11-13, 1990,  in  Pittsburgh.  The  symposium  will  highlight 
both  the  state  of  software  engineering  technology  and  the  state  of  software  engineering 
practice. 
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The  Empirical  Methods  Function  supports  transition  management  of  SEl  technology 
projects  by  providing  market  research  methods  and  materials,  conducting  surveys,  and 
evaluating  events  or  validating  products  of  SEl  projects. 

Empirical  Methods  staff  reported  the  results  of  the  first  phase  of  a  two-phased  study  of 
U.S.  software  capacity  to  Air  Force  Systems  Command  (AFSC).  The  SEl  is  collaborat¬ 
ing  with  ESD  and  MITRE  in  assessing  the  nation’s  capacity  to  produce  software  for  the 
DoD.  In  the  first  phase  of  the  study,  106  industry  and  Air  Force  executives  were  asked 
to  rate  the  relative  importance  of  factors  that  contribute  to  failure  to  meet  schedules  and 
budgets  for  software  development  contracts.  The  executives  listed  these  factors  as  the 
ten  most  serious:  inadequate  requirements  specification,  changes  in  requirements,  short¬ 
ages  of  systems  engineers,  shortages  of  software  managers,  shortages  of  qualified  project 
managers,  shortages  of  software  engineers,  fixed-price  contracts,  inadequate  communica¬ 
tion  for  systems  integration,  insufficient  experience  as  a  team,  and  shortages  of  applica¬ 
tion  domain  experts.  Empirical  Methods  staff  also  reported  on  readily  available  data 
about  demand  for  Ada  software,  growth  in  demand  for  post-deployment  software  sup¬ 
port  (PDSS),  and  labor  supply  for  software  and  systems  development. 

Empirical  Methods  stafi'  conducted  a  telephone  survey  concerning  the  economics  of  Ada 
adoption.  Those  surveyed  included  senior  technical  and  management  staff  of  SO  compa¬ 
nies  working  in  14  application  areas.  A  report  that  summarizes  the  results  of  the  survey 
will  complete  current  SEl  efforts  to  study  and  document  MCCR  industry  decisions  to 
adopt  or  not  adopt  Ada  for  use  in  specific  application  domains.  The  report  is  scheduled 
to  be  available  by  the  summer  of  1990. 
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CERT  Coordination  Center 


The  Computer  Emergency  Response  Team  Coordination  Center  (CERT/CC)  supple¬ 
ments  existing  mechanisms  by  which  infonnally  organized  experts  deal  with  and  prevent 
computer  emergencies.  The  CERT/CC  at  the  SEI  suf^rts  two  different  communities: 
Internet  users  and  developers  of  technology  that  is  available  on  the  network,  such  as 
Unix  and  networking  software.  The  CERT/CC  provides  a  dependable  24-hour  point  of 
contact  for  security  issues  and  allows  rapid  communication  during  emergencies.  It  also 
raises  constituents’  awareness  of  security  issues  and  assists  individual  organizations  in 
improving  the  security  of  their  systems.  Finally,  the  CERT/CC  maintains  a  highly  secure 
repository  of  information  for  team  members  and  cultivates  close  ties  with  researchers  in 
the  area  of  trusted  systems  to  improve  the  security  of  existing  systems. 

Since  its  inception  in  1988,  the  CERT/CC  has  responded  to  a  continuous  stream  of  re¬ 
ported  security  incidents.  These  include  reports  of  intrusions,  worms,  and  viruses  as  well 
as  reports  of  vulnerabilities  and  suggested  fixes  for  problems.  In  handling  these  prob¬ 
lems,  the  CERT/CC  issues  advisories  to  the  Internet  community  to  warn  them  of  prob¬ 
lems  and  inform  them  of  preventive  techniques.  In  cases  where  vulnerabilities  exist,  the 
CERT/CC  works  with  software  vendors  and  the  technical  community  tn  analyzing  and 
resolving  the  problems. 


During  the  first  quarter  of  1990,  the  CERT/CC  worked  with  the  Internet  Engineering 
Task  Force  (IETF)  to  initiate  a  separate  IETF  security  working  area.  A  working  group 
dealing  with  Internet  security  policy  was  initiated.  This  working  group  will  produce  rec¬ 
ommendations  for  network  security  policy  and  will  present  those  recommendations  to 
the  Internet  Activities  Board. 

CERT  project  members  organized  a  second  IETF  working  group  focused  on  producing  a 
security  handbook  for  use  by  Internet-connected  site  and  system  administrates.  The 
handbook  will  provide  guidance  on  policy,  administrative,  and  technical  issues  to  sup¬ 
port  administrators’  efforts  to  improve  the  security  of  their  systems. 

The  CERT  project  members  also  established  an  online  repository  of  computer  security 
information.  This  repository  includes  listings  of  all  CERT  advisories  and  Federal  Infor¬ 
mation  Processing  Standards  Publications  from  the  National  Institute  of  Standards  and 
Technology.  More  than  300  requests  for  information  have  already  been  processed. 

The  CERT/CC  produced  a  draft  charter  and  called  a  membership  meeting  of  the  CERT 
system,  a  federation  of  organizations  working  together  to  improve  the  security  of  their 
systems.  Formalizing  the  relationship  among  the  organizations  will  allow  closer  coopera¬ 
tion  of  group  members  and  will  also  jHovide  a  mechanism  for  expanding  group  member¬ 
ship.  ► 
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► 

CERT  project  members  completed  planning  for  and  recently  announced  tb''  Second  In¬ 
vitational  Workshop  on  Computer  Security  Incident  Response,  scheduled  for  June.  This 
workshop  will  focus  on  new  ideas  and  models  in  the  area  of  incident  handling  as  well  as 
lessons  learned.  The  workshop  will  focus  on  three  broad  sets  of  issues:  managerial  issues, 
threats  and  vulnerabilities,  and  communication  issues.  More  than  40  speakers,  each  active 
in  responding  to  and  preventing  computer  security  incidents,  will  present  their  work  and 
will  interact  with  session  attendees. 
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For  More  Information 


To  order  an  SEI  publication,  send  a  written  request  accompanied  by  a  preaddressed 
mailing  label  to: 

Software  Engineering  Institute 
ATTN:  Publications  Requests 
Carnegie  Mellon  University 
Pittsburgh.  PA  15213-3890 


To  be  added  to  the  Bridge  mailing  list,  write  to: 

Software  Engineering  Institute 
ATTN:  Bridge  Mailing  List 
Carnegie  Mellon  University 
Pittsburgh.  PA  15213-3890 


For  information  on  opportunities  for  affiliation,  conUK:t: 

Software  Engineering  Institute 
ATTN:  Mark  Coticchia 
Carnegie  Mellon  University 
Pittsburgh.  PA  15213-3890 
(412)  268-6138 
Internet:  mec<g>  sei.cmu.edu 


For  further  information  about  the  SEI,  contact: 

Information  Center 
Software  Engineering  Institute 
Carnegie  Mellon  University 
Pittsburgh,  PA  15213-3890 
(412)  268-5800 


How  to  Order 
SEI  Publications 


How  to  Get  the 
SEI  Magazine 


How  to  Become 
an  SEI  Affiliate 


How  to  Get 

Additional  Information 
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